Victor Muthomi

Victor Muthomi working at a development workstation

From rural Kenya to the forefront of technology, my journey has been shaped by curiosity, persistence, and a passion for solving real-world problems. My interest in programming began during my teenage years and grew into a career focused on software engineering, where I discovered the satisfaction of building scalable systems that improve how people and organizations work.

Today, I specialize in Python development, backend engineering, and Frappe/ERPNext solutions, designing secure, scalable applications for businesses, institutions, and communities. My experience spans enterprise software, REST APIs, automation, database design, cloud deployments, and AI-powered solutions, enabling me to deliver technology that is both practical and reliable.

As my experience grew, I became increasingly interested in understanding not only how systems are built, but also how they can be broken—and more importantly, how they can be secured. That curiosity led me into cybersecurity, where I began specializing in offensive security and penetration testing.

I have developed my skills through extensive hands-on practice on platforms including Hack The Box, TryHackMe, PortSwigger Web Security Academy, OWASP Juice Shop, OWASP WebGoat, CyberDefenders, OverTheWire, and PicoCTF. These environments have allowed me to simulate real-world attack scenarios and gain practical experience in reconnaissance, web application security, API security, authentication flaws, privilege escalation, exploitation, post-exploitation, vulnerability assessment, Active Directory fundamentals, Linux and Windows security, and secure coding practices.

My security toolkit includes Burp Suite, Nmap, Wireshark, Metasploit Framework, SQLMap, Nikto, Gobuster, ffuf, Hydra, John the Ripper, Hashcat, Aircrack-ng, Kismet, Impacket, NetExec (formerly CrackMapExec), and custom Python scripts for automation and security testing. Working in Linux-first environments has strengthened my understanding of networking, operating systems, secure system administration, vulnerability assessment, and penetration testing methodologies based on industry best practices.

Today, I combine the perspectives of both a software engineer and an offensive security practitioner. I approach every application with a security-first mindset—mapping attack surfaces, identifying vulnerabilities, validating security risks responsibly, and translating technical findings into practical remediation strategies. My background as a developer enables me not only to discover security issues but also to understand their root causes and recommend effective, developer-friendly solutions.

I believe the strongest security professionals understand how software is engineered, and the strongest software engineers understand how it can be attacked. My goal is to continue advancing as a penetration tester and security researcher while building resilient applications that can withstand modern cyber threats and contribute to a safer digital ecosystem.